Because of this issue, I cannot test projects that rely on the installation of third-party kexts on macOS 10.13 or later, even if they have been properly signed. I’m trying to use Tunnelblick’s build of tuntaposx, which has been properly notarised for compatibility with macOS 10.14.5 and later.
The only way around this seems to be to use osx_image: xcode9.2 (which uses macOS 10.12), but this has much older system packages.
I understand it being the default (software that requires third-party kexts should be in the minority), but with no way to switch this off, it makes it impossible to use Travis CI to test user-space networking tools on macOS.
Bump…
It’s still affecting builds loading kernel extensions such as osxfuse, and a couple other cases where SIP prevents builds from completing on newer versions of OSX + XCode VMs.
GitHub Issues (closed as stale, but still valid):